Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
File: 3133382e302e3133362e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier: pYgz/1l8F5h6LJ4Yl2iIvyH1gML2zLxJJsynslpAp4w=
Subject key identifier: 97:A2:DD:65:F9:88:7A:1A:F3:EB:6E:75:39:E1:AB:6A:07:2B:5D:47
Certificate issuer: /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial: 171C5EC5F13D82894206F168338CDCF3BB4B3831
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
Signing time: Wed 04 Dec 2024 03:39:40 +0000
ROA not before: Wed 04 Dec 2024 03:34:40 +0000
ROA not after: Wed 03 Dec 2025 03:39:40 +0000
asID: 264550
IP address blocks: 138.0.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1c:5e:c5:f1:3d:82:89:42:06:f1:68:33:8c:dc:f3:bb:4b:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Validity
Not Before: Dec 4 03:34:40 2024 GMT
Not After : Dec 3 03:39:40 2025 GMT
Subject: CN=97A2DD65F9887A1AF3EB6E7539E1AB6A072B5D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:10:a2:76:87:fe:e5:b3:88:e3:44:fc:87:
c2:aa:e8:57:35:0f:84:d3:ba:51:54:25:2f:d2:6a:
26:17:ed:89:76:56:bf:f0:41:3d:87:80:13:ec:3b:
ec:33:e9:21:96:e3:a0:7b:d9:e4:72:8b:a7:eb:b5:
00:d8:5e:3a:fa:4e:62:34:1a:9b:11:7d:1e:67:40:
7a:2d:f2:d8:c2:56:30:0f:ef:ef:1c:43:10:69:89:
44:1d:83:3f:1f:a9:ca:12:f6:a0:c8:37:52:a4:49:
f2:11:54:6f:f5:15:ed:9d:44:17:95:1e:45:31:38:
f6:ca:f6:95:fb:71:22:a9:7a:b7:5d:a7:04:bd:77:
df:d2:b6:c6:19:1d:57:fa:49:66:af:37:6e:d6:81:
6c:14:c3:87:b8:ff:a4:97:ab:23:25:27:a6:88:73:
ea:bc:72:6f:8a:5d:cd:d5:53:e1:ff:65:41:bc:3a:
a8:c0:3c:9d:96:fa:fe:15:96:5b:63:15:54:65:24:
2c:d2:71:d2:3a:1d:96:33:99:25:d9:20:bb:81:0b:
84:07:44:a8:ee:f5:a6:80:9c:70:24:fa:fb:5c:cd:
d4:45:9d:96:38:06:37:39:55:06:9b:83:ea:ae:08:
2e:1f:65:a1:9a:6d:6a:4f:6a:5d:a2:00:07:76:e1:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:DD:65:F9:88:7A:1A:F3:EB:6E:75:39:E1:AB:6A:07:2B:5D:47
X509v3 Authority Key Identifier:
keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.136.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:11:a7:1e:d5:fc:c7:52:5f:aa:a8:b7:06:30:ac:09:35:f1:
f9:d0:0c:13:8b:1f:be:59:61:7c:c5:9e:4c:c5:01:7e:b0:e4:
32:37:3b:89:37:8a:52:ae:0b:d6:e1:45:69:6b:4f:fb:0c:36:
e2:ed:93:cd:87:5b:bc:75:3d:c0:a6:09:a2:f5:54:53:c7:c6:
72:5f:19:5d:c8:60:1e:72:35:c0:b5:83:46:d4:df:7d:62:6e:
ee:bf:ce:5a:f1:a2:bd:61:ae:82:5d:31:e2:d1:26:2c:19:43:
13:e0:fa:5f:73:db:80:62:ff:e3:50:8f:1d:e5:b1:05:4b:c5:
74:d9:9f:3f:aa:e0:83:fb:fb:e6:e2:e7:c2:bc:80:74:c0:c1:
16:40:7e:86:58:9a:a1:2e:12:e4:42:0f:84:1b:b8:e7:99:82:
24:7c:d8:da:ec:ca:6a:e1:4d:bf:6c:02:9b:6c:c1:93:5f:d2:
a2:14:f9:7a:8d:75:0a:54:76:74:83:6b:38:83:47:48:f6:be:
24:38:15:cb:9c:fa:63:76:5b:7e:ad:71:a7:6d:d5:7c:70:91:
a4:14:e5:c9:0b:ec:5f:70:c2:6b:8b:26:ac:5f:41:d7:cb:d0:
9a:dd:06:59:51:9b:d7:b2:dd:54:65:54:fc:dd:1a:d6:a3:c1:
7d:0e:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:30:45 2025 by rpki-client